About the Position

Senior SOC Analyst

We are seeking a Senior SOC Analyst to join our Security Operations Center (SOC) team and help protect our customers against evolving cyber threats. You will play a key role in investigating security incidents, identifying attack patterns, improving detection capabilities, and supporting the continuous development of our SOC services.

We are ready to welcome our new colleague either in our Prague or Brno office.

Responsibilities

Lead the investigation and analysis of complex security incidents, determining their scope, impact, root cause, and business risk.
Coordinate incident response activities, driving containment, eradication, recovery, and post-incident reviews.
Perform proactive threat hunting to identify advanced threats, attacker persistence, and suspicious activity across enterprise environments.
Develop, tune, and optimize detection rules, analytics, and SIEM/XDR use cases to improve detection coverage and reduce false positives.
Conduct advanced log analysis and correlate events across endpoints, networks, cloud platforms, identity providers, and security technologies.
Create, maintain, and continuously improve incident response playbooks, detection use cases, and SOC operational procedures.
Mentor and provide technical guidance to L1 and L2 analysts, supporting investigations, escalations, and knowledge sharing.
Collaborate with engineering, IT, and security teams to improve security posture and drive remediation of identified risks.
Participate in purple team activities, detection validation, and continuous improvement initiatives.
Prepare technical reports and executive summaries, communicating findings and recommendations to both technical and management stakeholders.

Requirements

5+ years of experience in a SOC, Incident Response, Threat Detection, or Cybersecurity role, including proven experience in an L2 SOC position.
Extensive hands-on experience with SIEM and XDR platforms (e.g., Microsoft Sentinel, Microsoft Defender XDR, QRadar, Elastic, Splunk).
Strong experience leading complex incident investigations throughout the entire incident lifecycle.
Deep understanding of attacker tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, Cyber Kill Chain, and modern threat landscapes.
Advanced experience analyzing endpoint, identity, cloud, network, and application logs to identify malicious activity.
Strong knowledge of attack vectors including phishing, ransomware, malware, identity attacks, lateral movement, privilege escalation, persistence, and cloud-based threats.
Experience developing detection content, correlation rules, and threat hunting hypotheses.
Proven ability to mentor junior analysts, lead investigations, and improve SOC processes and operational maturity.
Excellent analytical, problem-solving, communication, and decision-making skills.
Advanced English (written and spoken).

Nice to Have

Experience with Microsoft Azure, Microsoft 365, Defender XDR, Microsoft Sentinel, and Entra ID security.
Experience with KQL, PowerShell, Python, or other scripting languages.
Experience with SOAR platforms and security automation.
Knowledge of malware analysis, digital forensics, or reverse engineering fundamentals.
Experience with threat intelligence platforms and integrating threat intelligence into detection and response.
Relevant security certifications such as SC-200, GCIH, GCIA, GCFA, GREM, CySA+, BTL1/BTL2, or equivalent.
Familiarity with security frameworks and best practices (NIST CSF, NIST 800-61, CIS Controls, ISO 27001).

We Offer

Motivating yearly bonus
5 weeks of paid vacation
5 days of Personal time off
Meal allowances
Contribution to the pension scheme or DIP - Long-Term Investment Product
Access to premium healthcare or a monthly allowance for health activities and relaxation
Relax room & games room
Possible internal growth
Loyalty and referral bonuses

About the Company

Our company is a dynamic fusion of innovation, skill, and vision, dedicated to transforming industries through technology. In this landscape, your unique talents and perspective are the keys to our collective success, contributing to groundbreaking solutions and strategies. Here, you're not just a part of the team; you're a vital contributor to a journey of continuous improvement and exceptional results. Join us, and let's shape the future together, where your growth is an integral part of our shared story.

Our Benefits

Time off: Everyone is entitled to 5 weeks of paid holiday per year. Plus up to 5 days of personal time off for personal illness or illness of immediate family member.
Meal contribution: While you’re at work, we make your meals more affordable. Of the meals you buy at any of our office locations, EmbedIT pays 55% of what you spend.
Flexible work: Our core working hours are from 9:00 to 15:00 daily, but how early you start or how late you work, is up to you. There is also the option to work remotely by arrangement.
Pension insurance: Everyone is entitled to a pension insurance allowance of CZK 2,000 per month.
Premium healthcare: All our people have access to private clinic health services.
Recharge by PPF: We reward your loyalty with Recharge: one extra month of leave for every five years worked.
Discount programmes: We have negotiated savings on your behalf at O2, Air Bank, Makro, Home Credit and other vendors.
Personal growth: Everyone is entitled to a budget and time allowance for hard and soft skills training, attending conferences and earning certifications.
Other cool things you can expect: Annual Christmas parties, team building events, IT breakfasts, HR breakfasts, wellness programme, family days and free fruit in the office several days of the week.

Our Hiring Process

Expect a concise hiring process focused on evaluating your fit through an application review, a skills interview, and a culture fit discussion. Our goal is to ensure clarity and feedback throughout.

Here’s what you can expect

Application

Start by submitting your application through our online portal. Make sure to showcase your skills, experiences, and enthusiasm for the position.

Screening

Our recruitment team will carefully review your application to assess your qualifications and alignment with the role. If you meet the criteria, we will reach out to schedule an initial screening call or interview.

Interviews

During the interview stage, you’ll have the opportunity to showcase your capabilities and learn more about EmbedIT’s culture and expectations. Depending on the position, you may participate in multiple rounds of interviews with various team members and stakeholders.

Assessments

For certain roles, we may conduct assessments or technical tests to evaluate your skills and suitability for the position. The assessments help us ensure a good fit between your abilities and the requirements of the role.

Offer

If you successfully complete the interview and assessment stages, we’ll extend a job offer to you. This offer will include details about compensation, benefits, and other pertinent information.

Onboarding

Once you accept our offer, we’ll guide you through our onboarding process which includes orientation sessions, training, and introductions to your team and key stakeholders, and assign you a “buddy” to help get you settled. We want to ensure that you feel welcome and prepared as you begin your journey at EmbedIT.

Apply for this Position

Let’s talk about the details in person. Get in touch with us.

Apply now
Send to a friend

You will be taken to a website of PPF Group, the enterprise we belong to.

Senior SOC Analyst

Job description